Security is just like finance. Having a second set of eyes is good, but ultimately only you really care about your own well-being. So having an audit company only helps if a) they're willing to train you and not just become a continuous drain on your financial resources, and b) if you have someone in charge of security they can interface with who cares about your data and networks more than they do. Nate -----Original Message----- From: piclist-bounces@mit.edu [mailto:piclist-bounces@mit.edu] On Behalf Of Yigit Turgut Sent: Thursday, February 12, 2009 3:31 PM To: piclist@mit.edu Subject: [OT]Security Auditing Hello Everyone, Company I am working for is planning to hire a 3rd party Security Auditing company and they wanted to have opinions from us. We have a 120 client internal network configured with various Cisco equipment and a wide-range wireless as well as 2 webservers and 3 ftp. Any suggestions ? Thank you -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist